Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138312e3139312e3230382e302f32322d3234203d3e203533313037.roa
File:                     3138312e3139312e3230382e302f32322d3234203d3e203533313037.roa (raw, json)
Hash identifier:          SE/+zHaU92S59RPzXfs9DeZRyR7vL9ZzgIUf5zXmJP8=
Subject key identifier:   47:5C:BD:85:55:2D:FC:0A:C4:B1:8E:3F:AF:22:FA:3A:8A:2C:0C:7B
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       71D8C98F85C1EDEC69709E53E9EA4D5826666F1F
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138312e3139312e3230382e302f32322d3234203d3e203533313037.roa
Signing time:             Tue 06 Aug 2024 00:19:14 +0000
ROA not before:           Tue 06 Aug 2024 00:14:14 +0000
ROA not after:            Tue 05 Aug 2025 00:19:14 +0000
asID:                     53107
IP address blocks:        181.191.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d8:c9:8f:85:c1:ed:ec:69:70:9e:53:e9:ea:4d:58:26:66:6f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Aug  6 00:14:14 2024 GMT
            Not After : Aug  5 00:19:14 2025 GMT
        Subject: CN=475CBD85552DFC0AC4B18E3FAF22FA3A8A2C0C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:d6:0a:bd:b1:fd:4e:b6:e8:8b:b3:4b:a5:
                    e4:46:31:48:2f:dd:2c:45:24:ea:4b:11:c5:31:c4:
                    f9:38:0c:73:23:35:f1:85:6a:a6:71:57:4e:a1:0f:
                    16:65:66:73:16:df:86:5a:83:31:9d:0f:ec:ee:3c:
                    67:d2:4c:50:04:c8:c8:23:b4:66:5b:14:6f:43:4d:
                    cf:82:15:8a:2b:63:bc:79:c8:64:6d:2f:93:88:74:
                    85:97:f1:ba:cb:07:e1:56:ce:97:48:32:00:fe:df:
                    cf:c0:d5:8f:a6:6c:2d:95:ac:cd:bf:3c:5a:fa:54:
                    ee:ef:f7:67:89:3d:d9:46:c3:1f:08:0b:d0:3c:48:
                    28:c3:11:da:de:01:96:ed:e7:d3:cb:22:8e:dd:ff:
                    e5:b0:13:b3:f6:d9:ff:d5:7d:55:ff:47:5f:70:65:
                    b1:e7:c6:b8:c9:14:9d:26:b4:0e:0c:a3:45:fa:a4:
                    e9:ba:66:b2:cf:2f:06:98:18:90:99:84:68:ed:2b:
                    40:35:98:aa:c5:9c:4a:f1:76:f9:54:8e:58:56:7b:
                    0b:9d:14:b9:8a:42:c5:47:53:60:0c:92:31:a4:2a:
                    1b:0f:0d:50:1d:6c:e5:5d:b4:d5:5a:49:20:c2:59:
                    b6:24:46:8f:81:ce:f8:62:1f:8c:a6:5f:e7:e8:48:
                    52:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5C:BD:85:55:2D:FC:0A:C4:B1:8E:3F:AF:22:FA:3A:8A:2C:0C:7B
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138312e3139312e3230382e302f32322d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:80:49:c9:67:1d:dd:c1:7e:01:eb:34:e5:a2:5a:f8:7d:4b:
         88:dd:48:ce:46:4c:0d:b8:73:02:c8:ff:9e:c1:ef:d5:c6:e6:
         37:c1:41:37:2a:e1:62:f3:e5:f2:bf:be:de:1b:9e:7f:a1:f0:
         f3:c9:2e:64:ab:0c:85:3c:19:7a:22:f6:63:5b:1d:f3:f8:68:
         f4:3e:f4:2a:d2:c5:d5:66:80:b4:23:86:3e:4f:26:59:4d:37:
         e5:0a:44:f7:80:c9:fa:28:c6:03:ed:ec:5e:10:0e:6c:2b:83:
         12:d2:3b:ba:1a:ef:1f:64:4d:7c:6c:e6:4c:2b:0f:6b:83:2a:
         2a:fd:b2:c7:f8:07:9b:65:07:d9:c0:dd:5d:4a:19:58:f9:c8:
         20:24:0b:05:cd:2c:cc:4a:c8:69:b5:a4:49:38:76:dd:bf:52:
         f3:a3:89:b8:c2:76:45:b0:b7:24:40:09:25:af:50:fd:32:be:
         3f:c3:e9:71:d5:92:2d:f6:84:87:17:1f:3c:07:6e:c3:2d:03:
         9a:56:ca:f0:dc:8f:10:df:08:0f:a0:e3:04:a9:95:85:45:f8:
         b6:b5:e3:45:c1:fc:10:1d:5c:18:d6:3e:32:f8:28:01:52:17:
         ab:2e:25:9e:28:21:3e:e9:51:eb:af:10:f2:50:cb:c8:b4:e5:
         e1:bc:62:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:46 2024 by rpki-client on console-fra.rpki-client.org